Schema Therapy Journey
Safepath Institute
Digital therapy platform with a real-time collaborative canvas, AI-guided exercises, subscriptions, and GDPR compliance — built for Safepath Institute.
Internal codename: iModes. ~8 months of continuous delivery (Oct 2025 – May 2026), 500+ commits, 110+ API routes, 35+ SQL migrations, and 45+ localized App Router pages.
Visit live productA quick look at the product before we get into the technical breakdown.
Safepath needed a production-grade therapy platform where clinicians and patients collaborate on a shared digital canvas (iModes cards, drawings, post-its) with live sync, guided AI exercises, subscription billing, and strict GDPR requirements — without relying on spreadsheets, ad-hoc tools, or manual admin SQL.
We shipped Schema Therapy Journey: a multi-role web app (therapist, patient, admin) on Next.js 15 and Supabase. The Konva-based canvas persists and syncs via Realtime; exercises use LLM coaching with session memory; WooCommerce and Stripe handle monetization with secure post-purchase onboarding; PGMQ workers run async jobs; and an internal iModes Control panel supports provisioning, revenue, and support workflows.
- Multi-tenant platform by role (therapist, patient, admin)
- Realtime canvas with checkpoints and persisted session state
- WooCommerce-integrated B2C onboarding with secure account provisioning
- iModes Control admin panel for ops without manual SQL
- European i18n (EN, PT, NL, IT) and GDPR tooling
Complex canvas state at scale
Therapy sessions require serialization, persistence, checkpoints, and realtime sync between therapist and patient. State is split across dedicated modules (store, serialization, persistence, realtime) so the UI stays responsive and recoverable.
Secure B2C onboarding after purchase
Post-WooCommerce account creation uses single-use tokens and welcome email flows — no unsafe magic-link shortcuts straight into the clinical dashboard.
GDPR-by-design
Cookie consent, data export, correction, and deletion flows, plus operational ROPA and breach procedures documented alongside rate limiting on APIs.
Multi-market i18n
Full UI in EN, PT, NL, and IT with next-intl; card locales extend to additional European languages for therapy content.